1
Zenarmor (Sensei) / Re: Home subscription - policy disabling itself
« on: August 09, 2023, 01:10:43 pm »
Same here. It has been detected by support for ticket 7447.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
23.1 Legacy Series / Re: Problems w/23.1_6 Upgrade including IPv6 - Maybe a Zenarmor Issue?
« on: February 14, 2023, 03:49:05 pm »
I was able to already do a reboot. No matter what I do, since i switched to bypass mode and back, IPv6 wont work anymore.
3
23.1 Legacy Series / Re: Problems w/23.1_6 Upgrade including IPv6 - Maybe a Zenarmor Issue?
« on: February 14, 2023, 01:45:29 pm »
Hi Sy
Same behaviour like before. OPNsense is able to ping devices on the internet, clients behind OPNsense are not. Unfortunately IPv6 isn't working again after switching back to previous settings, I think I have to reboot OPNsense (which will be done at 23:59
)
Same behaviour like before. OPNsense is able to ping devices on the internet, clients behind OPNsense are not. Unfortunately IPv6 isn't working again after switching back to previous settings, I think I have to reboot OPNsense (which will be done at 23:59
)
4
23.1 Legacy Series / Re: Problems w/23.1_6 Upgrade including IPv6 - Maybe a Zenarmor Issue?
« on: February 04, 2023, 05:25:46 pm »
Update:
I did some tests by pinging around and capturing it using tcpdump:
- Ping from firewall to VPS: OK, I can see ICMPv6 echo-request/-reply on VPS and firewall.
- Ping from client behind firewall to VPS: I can see ICMPv6 echo-request arriving on VPS and I can see an ICMPv6 echo-reply going out from VPS. Nothing arrives on firewall on WAN from VPS.
As soon as Zenarmor is disabled or running in passive mode, pinging from behind firewall works fine.
I did some tests by pinging around and capturing it using tcpdump:
- Ping from firewall to VPS: OK, I can see ICMPv6 echo-request/-reply on VPS and firewall.
- Ping from client behind firewall to VPS: I can see ICMPv6 echo-request arriving on VPS and I can see an ICMPv6 echo-reply going out from VPS. Nothing arrives on firewall on WAN from VPS.
As soon as Zenarmor is disabled or running in passive mode, pinging from behind firewall works fine.
5
23.1 Legacy Series / Re: Problems w/23.1_6 Upgrade including IPv6 - Maybe a Zenarmor Issue?
« on: February 04, 2023, 03:10:44 pm »
I have the same issue. As long as Zenarmor is not running in Passive Mode, I do not get IPv6 connectivity for clients behind OPNsense. Only firewall itself is able to use IPv6. As soon as Zenarmor is running in Passive Mode, IPv6 works as expected. I'll try to get some more details later and add it to this thread.
Pages: [1]